The majority of successful attacks are business email compromise. In that context take9 makes sense in my mind because there _is_ responsibility for users to be mindful of clicks.

Not every phishing email can be caught before it reaches users and campaigns to raise user awareness I think are important.